Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa
File:                     2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa (raw, json)
Hash identifier:          yQi9wWeh/aIVamiFck1m0D3wc6MsXeMcmrb4EtedMGs=
Subject key identifier:   80:DE:16:70:8B:71:FA:DA:E5:4F:49:1D:A7:89:78:18:B0:20:82:10
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E2809A464446DF9C0B9CA3280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     211440
IP address blocks:        108.165.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:a4:64:44:6d:f9:c0:b9:ca:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=55ce026d-1898-456a-b2ba-7a125e1a077b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f9:99:b7:2d:93:7b:31:41:95:0a:75:45:8b:
                    39:db:9b:37:96:85:99:c0:c3:3b:e2:e3:d5:0f:e1:
                    70:12:1c:fc:4f:50:59:e9:9d:76:6d:4c:b0:87:c5:
                    2c:51:c4:46:9a:06:80:1e:f9:01:e5:3b:25:37:68:
                    34:23:ee:5a:e2:dd:6a:6d:13:05:59:3e:f4:58:9a:
                    d0:3c:eb:ae:f4:84:1c:3c:7f:e8:43:27:e1:a4:fa:
                    9c:6c:7e:26:db:22:2d:e3:0d:d4:57:cc:0b:6e:68:
                    f1:b7:01:c4:a6:35:0b:3f:85:a5:ab:16:6a:2b:be:
                    58:fe:58:8b:6d:54:c3:0f:77:81:ed:9e:01:76:a3:
                    5a:5b:57:27:ac:d9:3c:8b:95:d1:74:ee:a0:31:63:
                    cb:8c:3d:a8:48:d8:eb:b9:55:84:e0:a8:d3:52:c3:
                    1b:a2:01:0c:ef:99:69:1b:59:ae:85:dc:24:a5:d2:
                    e6:9f:26:ee:e3:46:7b:2d:19:f8:b2:27:6a:a0:b5:
                    55:dc:60:4e:a6:fe:4e:b9:ca:cd:a7:43:cd:8b:87:
                    03:58:ed:2b:2a:4f:31:ca:fa:57:f1:64:59:26:73:
                    7c:f4:c4:e2:0c:aa:66:71:1d:dd:c1:5c:b9:f3:c4:
                    2a:d8:9e:c3:09:d6:31:76:ea:37:66:d5:2b:04:3c:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DE:16:70:8B:71:FA:DA:E5:4F:49:1D:A7:89:78:18:B0:20:82:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:ff:15:f4:1d:c5:3b:9a:93:d3:2b:b1:19:58:2f:2a:b6:
         72:7c:a2:b4:34:7f:03:40:53:ff:35:56:3b:c9:1f:9c:98:88:
         dd:c6:4d:16:03:1b:cf:1a:fa:62:34:29:8a:bc:50:67:5a:a9:
         af:07:c8:1d:d4:bd:aa:ff:7a:96:e6:9d:12:2d:65:b8:9f:58:
         00:cf:7a:74:c5:4c:d8:dc:4b:6d:4d:f1:60:99:8a:79:f5:bb:
         1e:c1:2d:80:ed:56:c9:ca:c2:a3:8e:ef:59:ef:fb:0f:4c:54:
         f3:fe:9f:bd:3b:8a:ab:07:22:26:3d:1e:ef:51:e2:8a:62:ec:
         2c:c8:c0:0c:4f:9f:73:b1:78:da:3c:4f:23:e8:b8:9b:be:48:
         35:c3:6d:b6:19:d2:68:ae:dc:cf:9d:5a:2f:c4:de:63:c7:e3:
         75:4c:a7:26:2c:0a:7f:dd:88:1c:24:a3:1c:c5:4f:76:19:93:
         68:f1:94:ed:70:ec:1a:22:a5:0a:94:f8:a7:a1:2c:42:62:ec:
         18:67:3b:d9:89:e8:07:b2:e4:56:aa:ba:aa:46:32:bd:d0:c6:
         a0:32:f1:46:3c:67:be:35:a2:fb:ca:96:ea:e6:23:20:20:30:
         e6:9e:ea:ca:56:cd:d1:31:a2:51:4e:b7:1a:7c:78:81:6e:14:
         02:8b:5a:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCaRkRG35wLnKMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk
NTVjZTAyNmQtMTg5OC00NTZhLWIyYmEtN2ExMjVlMWEwNzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/mZty2TezFBlQp1RYs525s3loWZwMM74uPV
D+FwEhz8T1BZ6Z12bUywh8UsUcRGmgaAHvkB5TslN2g0I+5a4t1qbRMFWT70WJrQ
POuu9IQcPH/oQyfhpPqcbH4m2yIt4w3UV8wLbmjxtwHEpjULP4WlqxZqK75Y/liL
bVTDD3eB7Z4BdqNaW1cnrNk8i5XRdO6gMWPLjD2oSNjruVWE4KjTUsMbogEM75lp
G1muhdwkpdLmnybu40Z7LRn4sidqoLVV3GBOpv5OucrNp0PNi4cDWO0rKk8xyvpX
8WRZJnN89MTiDKpmcR3dwVy588Qq2J7DCdYxduo3ZtUrBDwEnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDeFnCLcfra5U9JHaeJeBiwIIIQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmVmYzdkMzctMWZlMi0z
ZjAzLTg5NTktZTkwM2ZlZjlmNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCP/xX0HcU7mpPTK7EZWC8qtnJ8orQ0fwNAU/81VjvJH5yYiN3GTRYD
G88a+mI0KYq8UGdaqa8HyB3Uvar/epbmnRItZbifWADPenTFTNjcS21N8WCZinn1
ux7BLYDtVsnKwqOO71nv+w9MVPP+n707iqsHIiY9Hu9R4opi7CzIwAxPn3OxeNo8
TyPouJu+SDXDbbYZ0miu3M+dWi/E3mPH43VMpyYsCn/diBwkoxzFT3YZk2jxlO1w
7BoipQqU+KehLEJi7BhnO9mJ6Aey5FaquqpGMr3QxqAy8UY8Z741ovvKlurmIyAg
MOae6spWzdExolFOtxp8eIFuFAKLWl4=
-----END CERTIFICATE-----
Generated at Mon Jul 20 17:48:14 2026 by rpki-client